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ABSTRACT 

The invention relates to a method forWrifying a transformer of a source code 
into a transformed code designed for an embeaded system (7). The method comprises 
at least the following steps: determining a single virtual machine that factors in the 
behavior of both of these codes (1,3), determinmg for each of said source (1) and 
transformed (3) codes a plurality of so-called au:?oiliary functions representing the 
residual differences between said source (1) and transformed (3) codes, and a step 
consisting of verifying a correspondence property between the auxiliary functions, the 
verification of the code transformer (2) being obtained from this last step. 
It particularly applies to chip cards (7), \ 
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